You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Description: The program fsd4192.exe version 1.0.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Description: The program iexplore.exe version 11.0.9600.17937 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Description: The program WeatherBug.exe version 1.0.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Greetings and to BleepingComputer,
My name is xXToffeeXx, but feel free to call me Toffee if it is easier for you. I will be helping you with your malware problems.

A few points to cover before we start:

Do not run any tools without being instructed to as this makes my job much harder in trying to figure out what you have done.

Make sure to read my instructions fully before attempting a step.

If you have problems or questions with any of the steps, feel free to ask me. I will be happy to answer any questions you have.

Please follow the topic by clicking on the "Follow this topic" button, and make sure a tick is in the "receive notifications" and is set to "Instantly". Any replies should be made in this topic by clicking the "Reply to this topic" button.

Important information in my posts will often be in bold, make sure to take note of these.

I will attempt to reply as soon as possible, and normally within 24 hours of your reply. If this is not possible or I have a delay then I will let you know.

I will bump a topic after 3 days of no activity, and then will give you another 2 days to reply before a topic is closed. If you need more time than this please let me know.

Let's get going now

==========================

Hi cpotter,

We need to remove programs using "Programs and Features"

Click the "Start" orb on the taskbar, and then click the "Control Panel" button.

If you use Category mode, click on Uninstall a Program.

If you use Icons mode, click on Program and Features.

A list of programs installed will be "populated" (this may take a bit of time).
If they exist, uninstall the following by clicking on the below entries and selecting "Remove":

Service Found : bsdriver
Service Found : cherimoya
Service Found : csrcc
Service Found : globalUpdate
Service Found : globalUpdatem
Service Found : qrnfd_1_10_0_9
Service Found : wsafd_1_10_0_19
Service Found : fb34c88a-8ad6-4355-a5df-7f6d006d9cdb

Tried cleaning. ADW showed as "finished", but program hung. I had to manually reboot. Didn't get log file at restart. So, ran ADW again. Worked correctly with the below log file created at startup. Because of the confusion, I ran an ADW scan again (after 2nd cleaning). I have attached this scan log, should you need it.

Note: It's important that both files, FRST.exe/FRST64.exe and fixlist.txt are in the same location or the fix will not workNOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST.exe/FRST64.exe and press the Fix button just once and wait

If for some reason the tool needs a restart, please make sure you let the system restart normally, then let the tool complete its run

When finished, FRST will generate a log (Fixlog.txt) in the same location the tool was run.

Please copy and paste the log in your next reply.

--------------

Please re-run FRST from the desktop (like you did before), put a check into the box next to Addition.txt and press the scan button. It will produce FRST.txt and Addition.txt logs located on the desktop. Please copy and paste the logs into your next reply.

--------------

To recap, in your next reply I would like to see the following. Make sure to copy & paste them unless I ask otherwise:

Error: (08/18/2015 07:11:53 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program FRST64.exe version 16.8.2015.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 145c

Start Time: 01d0d9ae7d2aa5e8

Termination Time: 0

Application Path: C:\Users\Chad\Desktop\FRST64.exe

Report Id: 4945ee7f-45a2-11e5-ad06-d4bed9e1d989

Error: (08/18/2015 07:10:41 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program IEXPLORE.EXE version 11.0.9600.17937 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Error: (08/18/2015 07:10:20 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program IEXPLORE.EXE version 11.0.9600.17937 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Error: (08/18/2015 07:09:44 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program IEXPLORE.EXE version 11.0.9600.17937 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

System errors:
=============
Error: (08/18/2015 08:58:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Google Update Service (gupdate) service failed to start due to the following error:
%%2

Error: (08/18/2015 08:53:45 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error:
%%1056

Error: (08/18/2015 08:53:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The ElejooLyunp service failed to start due to the following error:
%%2

Error: (08/18/2015 08:53:16 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Software Protection service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.

Error: (08/18/2015 08:53:15 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Windows Installer service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.

Error: (08/18/2015 08:53:15 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Windows Modules Installer service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.

Error: (08/18/2015 08:53:15 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Error: (08/18/2015 08:53:15 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Error: (08/18/2015 08:53:15 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Uiviuuj service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 200 milliseconds: Restart the service.

CodeIntegrity:
===================================
Date: 2015-08-16 15:37:23.369
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\AdwCleaner\Quarantine\C\Program Files\SpaceSoundPro\SpaceSoundPro.dll.vir because the set of per-page image hashes could not be found on the system.